CCX: Enabling Unmodified Intel SGX Applications on Arm CCA

• URL: http://arxiv.org/abs/2605.07548v1
• Date: Fri, 08 May 2026 10:22:23 GMT
• Title: CCX: Enabling Unmodified Intel SGX Applications on Arm CCA
• Abstract summary: We present the design and implementation of CCX, a framework that enables existing SGX applications to run on Arm CCA without source code modification.<n>Our evaluation shows that CCX is capable of executing existing SGX applications without requiring source code changes.
• Score: 11.799850638805603
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: Novel confidential computing technologies such as Intel TDX, AMD SEV, and Arm CCA have recently emerged. In practice, due to its minimal trust boundaries, Intel SGX still remains widely used for enclave-based applications in cloud environments, including confidential cloud services, privacy-preserving communication, secure payment processing, and privacy-focused advertising. With the growing adoption of Arm CPUs in cloud systems, however, existing SGX applications face a significant portability challenge: they are tightly coupled to SGX-specific APIs and execution semantics. In this paper, we present the design and implementation of CCX, a framework that enables existing SGX applications to run on Arm CCA without source code modification. To this end, CCX redesigns SGX functionality within Arm CCA firmware, adapting SGX abstractions to CCA's architecture design while preserving full compatibility with existing applications originally developed for SGX. We implemented a prototype of CCX on both the QEMU emulator and a Nitrogen8M development board. Our evaluation shows that CCX is capable of executing existing SGX applications without requiring source code changes, while providing security guarantees comparable to Intel SGX and achieving performance improvements in our evaluated settings.

Related papers

• Benchmarks for Trajectory Safety Evaluation and Diagnosis in OpenClaw and Codex: ATBench-Claw and ATBench-CodeX [54.138213405601896]
  ATBench is a diverse and realistic agent trajectory benchmark for safety evaluation and diagnosis.<n>This report presents ATBench-Claw and ATBench-CodeX, two domain-customized extensions that carry ATBench into the OpenClaw and OpenAI Codex / Codex-runtime settings.
  arXiv  Detail & Related papers  (2026-04-16T10:45:13Z)
• Confucius Code Agent: Scalable Agent Scaffolding for Real-World Codebases [44.366968508477235]
  We introduce the Confucius Code Agent (CCA), a scalable software engineering agent that can operate at large-scales.<n>CCA is built on top of the Confucius SDK, an agent development platform structured around three complementary perspectives.<n>In addition, we introduce a meta-agent that automates the synthesis, evaluation, and refinement of agent configurations.
  arXiv  Detail & Related papers  (2025-12-11T08:05:58Z)
• Knowledge-Guided Multi-Agent Framework for Application-Level Software Code Generation [47.691865459572995]
  This paper envisions a Knowledge-Guided Application-Level Code Generation framework named KGACG.<n> KGACG aims to trans- form software requirements specification and architectural design document into executable code.
  arXiv  Detail & Related papers  (2025-10-22T03:10:58Z)
• Performance and Storage Analysis of CRYSTALS Kyber as a Post Quantum Replacement for RSA and ECC [45.88028371034407]
  CRYSTALS-Kyber is a post-quantum cryptographic solution standardized by NIST in 2022.<n>This study evaluates Kyber's practical viability through performance testing across various implementation schemes.
  arXiv  Detail & Related papers  (2025-08-03T09:53:45Z)
• Supporting Intel(r) SGX on Multi-Package Platforms [0.9472118191005167]
  Intel Software Guard Extensions (SGX) was originally released on client platforms and later extended to single socket server platforms.<n>Various Cloud Service Providers (CSPs) are demonstrating the value of using SGX based Trusted Execution Environments (TEE) to create a new paradigm of Confidential Cloud Computing.<n>This paper describes the additional platform enhancements we believe are necessary to deliver a user programmable Trusted Execution Environment that scales to cloud usages, performs and is secure on multi-package platforms.
  arXiv  Detail & Related papers  (2025-07-10T21:58:23Z)
• OpenCCA: An Open Framework to Enable Arm CCA Research [3.4913694429616027]
  Unlike TDX and SEV-SNP, a key challenge in researching Arm CCA is the absence of hardware support.<n>We present OpenCCA, an open research platform that enables the execution of CCA-bound code on commodity Armv8.2 hardware.
  arXiv  Detail & Related papers  (2025-06-05T15:16:25Z)
• Applied Post Quantum Cryptography: A Practical Approach for Generating Certificates in Industrial Environments [0.0]
  Post-quantum cryptography (PQC) presents significant challenges for certificate-based identity management in industrial environments.<n>This work analyzes the integration of PQC into X.509 certificate structures and compares existing tool support for classical, hybrid, composite, and chameleon certificates.<n>A gap is identified in available open-source solutions, particularly for the generation and validation of hybrid and composite certificates.
  arXiv  Detail & Related papers  (2025-05-07T11:28:35Z)
• GuaranTEE: Towards Attestable and Private ML with CCA [6.024889136631505]
  GuaranTEE is a framework to provide attestable private machine learning on the edge. We evaluate CCA's feasibility to deploy ML models by developing, evaluating, and openly releasing a prototype.
  arXiv  Detail & Related papers  (2024-03-29T23:07:29Z)
• The Road to Trust: Building Enclaves within Confidential VMs [17.064775757967627]
  NestedSGX is a framework which leverages virtual machine privilege level (VMPL) It considers the guest OS untrusted for loading potentially malicious code. It ensures that only trusted and measured code executed within the enclave can be remotely attested.
  arXiv  Detail & Related papers  (2024-02-18T03:15:02Z)
• A backend-agnostic, quantum-classical framework for simulations of chemistry in C++ [62.997667081978825]
  We present the XACC system-level quantum computing framework as a platform for prototyping, developing, and deploying quantum-classical software. A series of examples demonstrating some of the state-of-the-art chemistry algorithms currently implemented in XACC are presented.
  arXiv  Detail & Related papers  (2021-05-04T16:53:51Z)
• Extending C++ for Heterogeneous Quantum-Classical Computing [56.782064931823015]
  qcor is a language extension to C++ and compiler implementation that enables heterogeneous quantum-classical programming, compilation, and execution in a single-source context. Our work provides a first-of-its-kind C++ compiler enabling high-level quantum kernel (function) expression in a quantum-language manner.
  arXiv  Detail & Related papers  (2020-10-08T12:49:07Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.